800-53 · SC System and Communications Protection
SC-39
Process Isolation
frameworkNIST SP 800-53 Rev 5.2
sectionSC System and Communications Protection
csf 2.0PR.DS-01 PR.DS-10 PR.IR-03 PR.PS-03
topics—
frameworks0 0 1
Official textMaintain a separate execution domain for each executing system process.NIST SP 800-53 Rev 5.2 control statement (public domain)
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| NIST CSF 2.0 | PR.DS-01PR.DS-10PR.IR-03PR.PS-03 | The confidentiality, integrity, and availability of data-at-rest are protected; The confidentiality, integrity, and availability of data-in-use are protected… | No mapping. Only shares CSF PR.DS-01, PR.DS-10, PR.IR-03, PR.PS-03: related, not a mapping | |
| ISO 27001 | A.8.17Clause 4.2A.5.3A.5.10 | Clock synchronization; Understanding the needs and expectations of interested parties… | No mapping. Only shares CSF PR.DS-01, PR.DS-10, PR.IR-03: related, not a mapping+33 more loosely related (not mappings)…and 29 more in the downloads | |
| CIS v8.1 | CIS 1.2CIS 3.11CIS 3.1CIS 3.4 | Address Unauthorized Assets; Encrypt Sensitive Data at Rest… | No mapping. Only shares CSF PR.PS-03, PR.DS-01, PR.DS-10: related, not a mapping | |
| SOC 2 | C1.2CC6.5CC6.7A1.1 | Disposing of confidential information; Protection of data when assets are disposed of… | No mapping. Only shares CSF PR.DS-01, PR.DS-10, PR.IR-03: related, not a mapping | |
| PCI DSS | 9.4.73.2.13.3.13.4.1 | Electronic media destroyed or made unrecoverable; Account data storage minimised, with retention and disposal… | No mapping. Only shares CSF PR.DS-01, PR.PS-03, PR.DS-10: related, not a mapping+19 more loosely related (not mappings)3.5.1.3 Disk encryption access managed separately from OS access Only shares CSF PR.DS-01: related, not a mapping 3.6.1 Procedures protect keys that secure stored account data Only shares CSF PR.DS-01: related, not a mapping 3.6.1.1 Service providers document their cryptographic architecture Only shares CSF PR.DS-01: related, not a mapping …and 15 more in the downloads | |
| CMMC | SC.L2-3.13.2MP.L2-3.8.9SC.L2-3.13.1SC.L2-3.13.4 | Security Engineering; Protect Backups… | No mapping. Only shares CSF PR.DS-01, PR.DS-10, PR.IR-03: related, not a mapping+22 more loosely related (not mappings)SC.L2-3.13.5 Public-Access System Separation Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping SC.L2-3.13.6 Network Communication by Exception Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping …and 18 more in the downloads | |
| HIPAA | §164.308(a)(1)(ii)(D)§164.308(a)(4)(ii)(A)§164.308(a)(7)(ii)(A)§164.308(a)(7)(ii)(B) | Information System Activity Review; Isolating Health care Clearinghouse Function… | No mapping. Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping+21 more loosely related (not mappings)§164.308(b)(1) Business Associate Contracts and Other Arrangements Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping §164.308(b)(4) Written Contract or Other Arrangement Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping §164.310(d)(2)(iv) Data Backup and Storage Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping §164.312(a)(2)(iv) Encryption and Decryption Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping …and 17 more in the downloads | |
| GDPR | Art.32(1)(b)Art.5(1)(e)Art.5(1)(f)Art.32(1)(a) | Security of processing; Principles relating to processing of personal data… | No mapping. Only shares CSF PR.DS-01, PR.DS-10, PR.IR-03: related, not a mapping+2 more loosely related (not mappings)Art.34(3)(a) Communication of a personal data breach to the data subject Only shares CSF PR.DS-01: related, not a mapping | |
| NIS2 | 4.36.109.112.3 | Crisis management; Vulnerability handling and disclosure… | No mapping. Only shares CSF PR.IR-03, PR.PS-03, PR.DS-01: related, not a mapping | |
| Essential Eight | ISM-1407ISM-1501ISM-1515ISM-1694 | The latest release, or the previous release, of operating systems are used; Operating systems that are no longer supported by vendors are replaced… | No mapping. Only shares CSF PR.PS-03, PR.IR-03: related, not a mapping+14 more loosely related (not mappings)ISM-1695 Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within one month of release Only shares CSF PR.PS-03: related, not a mapping ISM-1696 Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within 48 hours of… Only shares CSF PR.PS-03: related, not a mapping ISM-1697 Patches, updates or other vendor mitigations for vulnerabilities in drivers are applied within one month of release… Only shares CSF PR.PS-03: related, not a mapping ISM-1701 A vulnerability scanner is used at least daily to identify missing patches or updates for vulnerabilities in… Only shares CSF PR.PS-03: related, not a mapping …and 10 more in the downloads | |
| DORA | Art.9(2)Art.9(3)(c)Art.9(3)(d)Art.9(3)(a) | Protection and prevention; Protection and prevention… | No mapping. Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping+5 more loosely related (not mappings)…and 1 more in the downloads | |
| CPS 234 | Para 21 | Timely controls commensurate with risk and asset life-cycle | No mapping. Only shares CSF PR.DS-01, PR.DS-10: related, not a mapping | |
| Cyber Essentials | — | No requirement | No mapping in our data | No mapping in our data (Cyber Essentials covers five technical controls only). |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.